KMD A/S

Denmark · owned by NEC Corporation (Japan) · www.kmd.net · 16 vendors

KMD is a leading Danish IT and software company that develops and delivers solutions to local government, central government, and the private sector. It plays a key role in Denmark's digital infrastructure.

Resilience scores

Disruption prediction

KMD A/S has an estimated 11% probability of disruption in the next 6 months.

7 of KMD A/S's 16 vendors monitored for disruptions.

Technology vendors

Services catalogue

42 services in catalogue across 8 categories; runs on 16 sub-vendors.

Insights

Last updated 2026-09-13 · revision 1

16 direct vendors, 237 subvendors

Direct vendors by controlling owner country (sample)

Subvendors by controlling owner country (sample)

Migration Readiness: 4/10

Assessed by AI based on technology stack characteristics (cloud-native vs legacy, containerization, microservices), regulatory environment, data residency requirements, financial stability, and vendor lock-in risks. The score ranges from 0-10, where higher scores indicate better readiness for technology migration.

Migration readiness is assessed as low-to-medium due to the heavy regulatory burden and likely legacy infrastructure. As a provider of critical government IT systems, KMD faces strict data residency requirements (must remain in Denmark/EU) and NIS2 compliance obligations, which severely limit flexibility in cloud migration strategies. The description of KMD as 'long-established' suggests the presence of monolithic or legacy architectures that are difficult to refactor for modern cloud-native environments. While the NEC acquisition suggests financial capacity to fund migration projects, the lack of visibility into specific vendor dependencies (0 vendors listed) and the complexity of public sector compliance creates significant friction.

Compliance

5 in-scope frameworks identified; showing 3.

SOC 2 (source) — Assessment Required

SOC2 is a voluntary framework relevant for professional services companies providing IT services or handling client data, which KMD A/S likely does.

SOC2 is voluntary but important for professional services companies, especially those providing IT services or handling client data. While not mandatory, lack of SOC2 compliance can impact business relationships and client trust. Medium risk as it affects competitiveness rather than legal compliance.

ISAE 3000 (source) — Assessment Required

ISAE 3000 applies to assurance services providers. Applicability depends on whether KMD A/S offers such specialized services.

ISAE 3000 applies to assurance services providers. Without specific information about KMD's service offerings, it's unclear if they provide assurance services that would require ISAE 3000 compliance. Low risk as it's highly specialized and may not apply to general professional services.

NIS2 (source) — Assessment Required

As a Danish company in professional services, KMD A/S might fall under NIS2 if it provides digital services, ICT management, or serves critical sectors, depending on its size and specific offerings.

NIS2 applicability depends on specific services offered and company size. Professional services can include digital service providers or ICT service management which would qualify as Important Entities. Without specific details about KMD's services and size (50+ employees or €10M+ turnover), assessment is required. Medium risk as penalties are significant but applicability is uncertain.

Financials

Three-year financials

Financial Resilience Score: 8.5/10

KMD A/S demonstrates high financial resilience, underpinned by several key factors: Being a subsidiary of NEC Corporation (a global Fortune 500 company) provides an exceptionally strong financial backstop. This ensures access to capital for investment, stability during economic downturns, and the ability to pursue long-term strategic goals without being constrained by short-term market pressures. KMD is deeply entrenched in the Danish public sector. Its systems for social services, payroll, and local government administration are mission-critical. This creates high switching costs for its clients, resulting in a "sticky" customer base and highly predictable, long-term recurring revenue streams. The majority of KMD's revenue comes from long-term contracts with government entities. This insulates the company from the cyclicality that affects many private-sector-focused IT firms. The consistent growth in equity demonstrates a healthy balance sheet. The company is not overly leveraged, which provides flexibility and reduces financial risk.

Key strengths: Strong Ownership, Dominant Market Position, Stable and Predictable Cash Flows, Solid Balance Sheet

Risk factors: Margin Pressure, Concentration Risk

Revenue by geography

Revenue by product/service

Workforce by country

Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.

View the full interactive report